Gardner Law Expands Privacy and Regulatory Practices

Gardner Law is pleased to announce that Josh Arkulary has joined the firm, further strengthening its privacy, data protection, and regulatory practice capabilities. Additionally, Paul Rothermel, leader of our privacy practice group, has been promoted to managing attorney. 

Gardner Law Expands Privacy and Regulatory Practice with Addition of Josh Arkulary

Josh brings more than ten years of experience advising on HIPAA, FDA, and global privacy frameworks, with a career focused on helping regulated organizations navigate complex compliance obligations in highly scrutinized environments.

Josh’s background is particularly valuable for FDA-regulated companies conducting clinical research, commercializing innovative technologies, or managing sensitive health data across jurisdictions. Earlier in his career, he worked directly within hospital and research settings, supporting physician-investigators, clinical staff, and research operations. That experience gives him a practical understanding of how privacy, regulatory, and compliance requirements affect real-world operations, decision-making, and risk management.

Before joining Gardner Law, Josh served as an attorney consultant at Regeneron Pharmaceuticals, where he worked within a global privacy and regulatory framework spanning more than 30 countries. His work included advising on HIPAA and GDPR compliance, negotiating and reviewing complex agreements, addressing cross-border data use issues, responding to IRB, ethics committee, and regulatory authority inquiries, and supporting privacy and compliance considerations throughout the clinical trial lifecycle.

Josh also held senior regulatory roles at the Minneapolis Heart Institute Foundation and Children’s Hospital Colorado, where he advised on FDA and HIPAA requirements, supported inspections, and contributed to compliance and process improvement initiatives. Across his roles, he was consistently entrusted with high-risk matters and recognized for leadership and advancement.

Josh is particularly interested in the evolving intersection of privacy, emerging technologies, and healthcare, including artificial intelligence and cybersecurity. As regulatory expectations continue to evolve, his experience supports Gardner Law’s ability to advise clients on privacy and data protection risks that increasingly intersect with product development, commercialization, and enforcement.

“Josh brings a level of operational insight that is increasingly important for privacy and data protection counseling. He understands how regulatory and privacy requirements function in practice, across jurisdictions and technologies, and how those requirements translate into real compliance and enforcement risk for regulated companies.”
Paul Rothermel, Managing Attorney

View Josh’s full bio on our team page.

Paul Rothermel Promoted to Managing Attorney

In connection with the continued growth of the firm’s privacy and regulatory practice, Gardner Law has promoted Paul Rothermel to Managing Attorney. Paul leads the firm’s privacy practice group and has overseen its expansion as privacy, cybersecurity, and data protection considerations have become increasingly central to regulatory strategy and enforcement risk for life sciences and healthcare companies.

Paul provides practical, business-oriented advice to clients on HIPAA, GDPR, and other privacy, AI, and cybersecurity laws, as well as regulatory and compliance matters. He has been recognized by Super Lawyers as a Rising Star for the past 3 years, reflecting his experience in this area and his leadership within the firm’s privacy practice.

“Paul has been instrumental in building and leading our privacy practice as client needs in this area have evolved,” said Mark Gardner, Managing Partner of Gardner Law. “His promotion reflects both the growth of the practice and the trust our clients place in his judgment. Together, Paul and Josh strengthen our ability to advise clients on complex, intersecting privacy, regulatory, and compliance challenges.”

Growth Driven by Client Needs

These latest moves reflect Gardner Law’s continued growth and the confidence our clients place in us. As privacy, cybersecurity, and data governance issues become more central to FDA-regulated businesses, clients increasingly seek counsel with both regulatory depth and practical perspective.

By expanding our privacy and regulatory practice, Gardner Law continues to build the capabilities needed to support clients navigating evolving legal and compliance expectations. With Josh on board, the firm is even better positioned to advise companies operating at the intersection of regulation, technology, and data.